RADIX1112200101

Team RADIX Research Report: RADIX1112200101 Date Published: 11-12-2001 Research Report ID: RADIX1112200101 Bugtraq ID: 3185 CVE CAN: N/A Title: RunAs Service Pipe Authentication Failure Class: Privilege Escalation and Information Disclosure Remotely Exploitable: No Locally Exploitable: Yes...

Progress Database 8.3/9.1 - Multiple Buffer Overflows

source: https://www.securityfocus.com/bid/3404/info Progress is a commercial database for Microsoft Windows and Unix systems. Locally exploitable buffer overflows are prevalent throughout many Progress Database programs. This is largely due to insufficient bounds checking of data which is...

CVE-1999-1552

The CVE-1999-1552 entry concerns dpsexec (DPS Server) running under XDM on IBM AIX 3.2.5 and earlier. The root cause is an insufficient privilege check that allows local users to overwrite arbitrary files and gain privileges. The vulnerability is mapped with a NVD base score of 7.2 (HIGH) and LOC...

*ALERT* UPDATED BID 3163 (URGENCY 6.58): Sendmail Debugger Arbitrary Code Execution Vulnerability (fwd)

This alert is being posted to Bugtraq as our public release of the vulnerability discovered in Sendmail by Cade Cairns [email protected]. --------------------------------------------------------------------------- Security Alert Subject: Sendmail Debugger Arbitrary Code Execution...

Solaris /opt/SUNWvts/bin/ptexec Vulnerability

Vulnerability in Solaris /opt/SUNWvts/bin/ptexec Date Published: June 21, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris /opt/SUNWvts/bin/ptexec Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes...

Solaris mailx Vulnerability

Vulnerability in Solaris mailx1 Date Published: April 11, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris mailx1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The mai...

FreeBSD-SA-01:36.samba

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:36 Security Advisory FreeBSD, Inc. Topic: samba ports contain locally exploitable /tmp races Category: ports Module: samba Announced: 2001-04-23 Credits: Marcus Meissner...

SCO Open Server 5.0.6 - recon Buffer Overflow

source: https://www.securityfocus.com/bid/2560/info SCO OpenServer 5.0.6 and possibly earlier versions ships with a suid 'bin' executable called 'recon'. 'recon' is used to buffer and forward escape sequences from a user's input to timing-sensitive applications. 'recon' contains a locally...

Vim 5.x - Swap File Race Condition

Vim 5.x - Swap File Race Condition / source: https://www.securityfocus.com/bid/2927/info Vim is an enhanced version of the popular text editor vi. A race condition vulnerability exists in the swap file mechanism used by the 'vim' program. The error occurs when a swap file name for a file being...

Catman file clobbering vulnerability Solaris 2.x

Solaris 2.7/2.8 catman temp file vulnerability. Larry W. Cashdollar Vapid Labs Date Published: 12/18/2000 Advisory ID: 11242000-02 Risk: Low Title: catman temp file vulnerability. Class: insecure temp file handling. Remotely Exploitable: no Locally Exploitable: Yes Vulnerability Description:...

UNIX locale format string vulnerability

CORE SDI http://www.core-sdi.com UNIX locale format string vulnerability Date Published: September 4th, 2000 early release Advisory ID: CORE-090400 Bugtraq ID: 1634 CVE CAN: None currently assigned. Title: UNIX locale format string vulnerability Class: Input Validation Error Remotely Exploitable:...

SUIDPerl 5.00503 - Mail Shell Escape (1)

source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...

CVE-2000-0186

The CVE-2000-0186 entry concerns a buffer overflow in the dump utility of the Linux ext2fs backup package. The underlying issue is a too-long command line argument, which can allow a local user to gain privileges. The affected component is the dump utility within the ext2fs backup toolchain; the ...

Solaris 2.5.1 - License Manager

source: https://www.securityfocus.com/bid/461/info The Solaris License Manager that ships with versions 2.5.1 and 2.6 is vulnerable to multiple symlink attacks. License Manager creates lockfiles owned by root and set mode 666 which it writes to regularily. It follows symlinks. bash$ ls -l...

PT-1996-1019 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows local users to write to a file and gain group permissions via a .forward or :include: file. Recommendations: At the moment, there is no information about a newer version...

RealServer memory contents disclosure vulnerability

Advisory ID Internal CORE-21116 Advisory Information: Advisory ID: CORE-20001116 Bugtraq ID: 1957 CVE Name:CVE-2000-1181 Title: RealServer memory contents disclosure vulnerability Class: Failure to handle exceptional conditions Remotely Exploitable: Yes Locally Exploitable: Yes Release Mode:...

Denial of Service Vulnerabilities in Windows SMB implementation

Advisory ID Internal CORE-220618 Bugtraq ID: 5556 CVE Name: CAN-2002-0724 CERT: VU311619, VU342243, VU250635 Title: Denial of Service Vulnerabilities in Windows SMB implementation Class: Implementation flaws Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - Microsoft...

PT-2010-5674 · Gnu +1 · Glibc +1

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.2-r3 glibc versions prior to 2.15-r3 glibc-dceext-32bit affected versions not specified glibc-64bit affected versions not specified glibc-profile-64bit affected versions not specified glibc-obsolete affected...

PT-2010-5668 · Suse +1 · Suse Linux Enterprise +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to the fixed version btrfs-kmp-xen versions affected versions not specified btrfs-kmp-pae versions affected versions not specified kernel-desktop-devel versions affected versions not specified Description:...

PT-2010-5692 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.36-rc5-next-20100929 Description: The issue involves multiple vulnerabilities in the Linux kernel that can lead to a denial of service or potentially oth...